Manage Sources
The categorization of information sources makes a measurable difference to an organizational security profile. Categorizing Sources is essential in the incident management process to understand the extent of the potential damage an incident might cause. The Source field while creating incidents helps to specify the source of the incident. Some examples of sources are:
SIEM
CTIX
Email
Chat Bot
Notification
Anti-virus Software
Agencies
Third-party Applications
Logs
To manage and view the sources added in CFTR, go to Admin Panel > Settings > Source. You can view the following details of the sources:
Source Title
Source Type
Created Date
Last Updated Date
You can search and modify a source and view the activity logs to track the updates of the sources.
Add Source
You must have Create/Update permission for Sources to add a source.
Note
You cannot delete a source later.
To add a source, do the following:
Go to Admin Panel > Settings > Source.
Click AddSource at the top-right.
Enter the following details:
Source Name: Enter a name for the source.
Source Type: Search and select a source type. If a source type does not exist, click Create to create a source type and add it to the list of source types.
Click Add.